Content Security Policy to the Rescue
Learn to implement Content Security Policy to mitigate XSS vulnerabilities, prevent clickjacking, and enhance web application security through live demos and real-world examples.
Content Security Policies - Let's Break Stuff
Explore Content Security Policies: their importance, implementation, and impact on web security. Learn to protect against attacks, debug issues, and balance security with functionality.
CSP Analysis - Attacking XSS Mitigation
Explore Content Security Policy, its attack types, and effectiveness in mitigating XSS vulnerabilities in web applications.
Game of Chromes - Owning the Web with Zombie Chrome Extensions
Explore how malicious Chrome extensions can create botnets, distribute themselves, and exploit vulnerabilities. Learn about attack patterns, extension capabilities, and security measures.
HTTP Headers for the Responsible Developer
Explore HTTP headers for building inclusive, secure, and performant websites. Learn about encryption, request upgrades, content security policies, and data optimization techniques.
Crypto Heist - The Aftermath of a Government Website Cryptojacking Attack
Uncover a massive cryptojacking attack on government websites, explore its investigation, and learn preventive measures against similar threats in this eye-opening cybersecurity presentation.
Eliminating XSS in Angular Applications by Adopting Trusted Types
Learn to enhance Angular app security using Trusted Types. Discover implementation strategies, vulnerability fixes, and deployment techniques to strengthen your application against XSS attacks and data breaches.
Writing an Insecure Webapp
Explore common web app vulnerabilities and learn effective security practices to protect against threats like cross-site scripting and ensure robust application safety.
Towards a Post-XSS World
Explore Content Security Policy as a powerful tool to combat cross-site scripting attacks, enhancing web application security and regaining control over your code execution environment.
We're Struggling to Keep Up
Explore browser security challenges in modern web apps, covering current models, recent features, and potential enhancements, with insights on bypassing security mechanisms.
HTTP Headers - The Simplest Security
Explore essential HTTP security headers like Content-Security-Policy and Strict-Transport-Security. Learn implementation, browser support, and best practices for protecting web applications.
You Use Content Security Policy, Don't You?
Learn how Content Security Policy can protect your website from XSS and other attacks. Discover its workings, implementation, and real-world examples through live coding demonstrations.
Modern Security Standards
Explore modern web security standards and features to enhance protection and simplify implementation. Learn about Content Security Policy, STS, PKP, and more for robust online security.
What We’ve Learned From Billions of Security Reports
Explore insights from billions of security reports, scaling challenges, and real-world cybersecurity incidents in this talk on large-scale security reporting infrastructure.
Crash, Burn, Report
Discover how to leverage browsers as powerful monitoring tools using the Reporting API. Learn to detect and receive alerts for various web application issues automatically.
Excellent Ways to Secure Your Spring Boot Application
Learn essential techniques to secure Spring Boot applications, including HTTPS, dependency scanning, CSRF protection, CSP implementation, OIDC authentication, and password hashing.
Hyper Speed! When Big Data Blooms
Explore high-speed data processing using Bloom Filters, a powerful probabilistic data structure. Learn to handle massive data volumes efficiently, with real-world examples and advanced techniques.
Hyper Speed - When Big Data Blooms
Explore high-speed data processing techniques, focusing on Bloom Filters for efficient handling of massive data volumes in web security and content delivery applications.
Black Hat USA 2025
Black Hat USA 2025
Black Hat Europe 2023
Black Hat Europe 2023
Black Hat Europe 2024
Black Hat Europe 2024